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Description 

[0001] The present invention relates to a method for 
sealing containers, in particular blood bags, test-tubes 
containing samples for laboratory tests and the like, and 
for ensuring their correct allocation to a preset user, 
such as a specific patient, or a specific laboratory, and 
to a device for performing this method. 
[0002] In hospitals it is often necessary to allocate to 
a specific patient a type of blood or a specific Wood 
product that has been prepared specifically for that 
patient. 

[0003] Obviously, a mistake in allocation can cause 
severe harm and even the patient's death. 
[0004] Human error is the most frequent cause of 
acute fatal hemolytic reactions in blood transfusion and 
may occur in procedures concerning either the taking of 
blood samples or the distribution and/or transfusion of 
blood units. 

[0005] The aim of the present invention is to provide a 
method that can ensure a very high degree of safety, so 
as to in practice eliminate the occurrence of mistakes in 
recognizing or allocating a container intended for a pre- 
set user. 

[0006] Within the scope of this aim, a specific object 
of the present invention is to provide a method that 
allows to seal the container with the possibility of mem- 
orizing and identifying or recognizing the recipient user, 
so as to prevent opening unless a special identification 
or recognition procedure that authorizes the recipient to 
have access to the contents has given a positive result. 
[0007] Another object of the present invention is to 
provide a sealing device suitable for releasing, upon 
request, a number of information data such as the kind 
of test to be carried out on the contents of a container 
sealed by the device, laboratory test standards followed 
or to comply with, type of taken sample, kind of request 
to be satisfied or answer to be given, date, time and 
name of the sending forwarding operator, details on the 
recipient, and the like information. 
[0008] Another object of the present invention is to 
provide a sealing device that is highly reliable, since it 
allows to standardize recognition procedures, frees 
them from subjective decisions, is relatively easy to 
manufacture at competitive costs, and is simple and 
practical to use. 

[0009] According to a first aspect of the present inven- 
tion, a method is provided for sealing containers and 
ensuring their correct allocation to a preset recipient 
user according to claim 1 . 

[0010] According to another aspect of the present 
invention, a device for sealing containers and ensuring 
their correct allocation to a preset recipient user accord- 
ing to claim 7 is provided. 

[001 1 ] Further aspects and advantages of the present 
invention will become apparent from the following 
description of a currently preferred but not exclusive 
embodiment thereof, illustrated only by way of non-limit- 



ing example in the accompanying drawings, wherein: 

figure 1 is a schematic view of a module for the 
electronic control of a box or container for blood 

5 transport; 

figure 2 is a view of an input data module, in the 
form of an alphanumeric keyboard, and of a badge 
reader, to be connected to the module of figure 1 ; 
figure 3 is a view of an identification or recognition 

io device for patient test-tubes containing laboratory 
test samples for a patient; 
figure 4 is a view of an electronic key and of a key- 
generating module; 

figure 5 is a view of a box-like seal for transporting 
is a container, such as a blood bag; 

figure 6 is a view of an electronic locking module of 

a seal, such as that of figure 5; 

figure 7 is a flowchart of the control software of the 

control module of figure 1 ; 
20 figure 8 is a flowchart of the control software of the 

recognition device of figure 3; 

figure 9 is a flowchart of the control software of the 

locking module of figure 6; 

figure 10 shows a flowchart illustrating the general 
25 method according to the present invention; and 

figure 1 1 is a flowchart of a control software for a 

safety reception procedure. 

[0012] A specific embodiment of a sealing device 
30 according to the present invention is described below 
with specific reference to bag-like containers, particu- 
larly for transporting blood and blood products. 
[001 3] It will be noted that the device according to the 
invention comprises several components that can be 
35 connected to one another and are described in greater 
detail hereinafter. 

[0014] With reference to figures 1 to 6, a control mod- 
ule or apparatus 1 is schematically shown which com- 
prises an electronic circuit 1 1 , rechargeable batteries 12 

40 arranged to power the circuit 11, a printer 13, and an 
LED 15 for indicating the ON state and the charge sta- 
tus of the battery 1 2. The control apparatus 1 also has a 
number of connectors, i.e., a connector 19 for connec- 
tion to a battery charger (not shown), a connector 1 6 for 

45 connection to an electronic key 50 (figure 4), a connec- 
tor 17 for connection to a box-like seal or transportation 
container 6 (figure 5), a connector 18 for connection to 
a data input module 30 and/or 35 (figure 2), and a con- 
nector 14 for connection to a key-generating module 55 

so (figure 4). 

[001 5] The control apparatus 1 is meant to check the 
match between the code of the recipient user, e.g. a 
patient, stored in an electronic key 50, and me alloca- 
tion code stored in the box-like seal or transportation 

55 container 6. In case of a match, the apparatus 1 enables 
unlocking of the box-like seal or container 6. The control 
module 1 is controlled by suitable software, a flowchart 
of the same is shown in figure 7 and its functions will be 
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explained hereinafter. 

[001 6] Figure 2 shows a data input module 30 that 
comprises an alphanumeric keyboard 33, a connector 

31 for connection to the control module 1 , and a badge 
reader 35 provided with a connector 36 for direct con- 5 
nection to the control module 1 (if the keyboard in the 
module 30 is missing) or for connection to a connector 

32 of the module 30, in order to have both data input 
means available. The modules 30 and 35 are arranged 

to transfer the operator's personal code or other infor- 10 
mation data, which can be numeric or alphanumeric, to 
the control means 1. 

[0017] The badge reader 35 can be of the magnetic 
type or of the type suitable for reading chip-cards. 
[0018] Figure 3 illustrates a module 4 for identifying 15 
samples (for example test-tubes) for carrying out tests 
on the patient, which comprises an electronic circuit 40, 
a printer 44, e.g. a single-sheet printer, a connector 41 
for connection to the control module 1 , a connector 42 
for connection to an external optical reader (not shown), 20 
a connector 43 for connection to an external module 
(not shown) for locking the samples (test-tubes) to be 
tested in a laboratory, an internal optical reader 45, 
mechanical retaining means 47, for example of the 
clamping type for the test-tubes, and a reader 46 25 
(located inside the module) for detecting the presence 
or absence of material in the test-tube held by the 
retaining means. 

[001 9] Power to the test sample identification module 
4 for samples to be tested is supplied by the control 30 
module 1, to which the module 4 must be connected by 
means of the connector 41 . The module 4 has the func- 
tion of controlling the drawing of sample material (e.g. 
blood) from a patient, to whom an electronic personal 
identification key 50 has already been allotted. Once 35 
comparison between the code of the key 50 and the 
label on the container (test-tube) is positive, the module 
4 locks the container in position by means of the clamp- 
ing means 47 

[0020] After the test-tube has been filled with blood as 40 
a consequence of direct drawing from the patient, the 
module 4 prints a report that filling has occurred on a 
companion sheet and unlock the test-tube to allow its 
removal for being sent to a laboratory. 
[0021] The operator, by using the keyboard 33, can 45 
select the type of information to be coded (e.g. on a bar 
code) on the container or test-tube. e.g. the kind of test 
to be carried out and test data requested, type of drawn 
sample, identification code of the operator and the like. 
Automatic application of date, hour, etc. can be pro- so 
vided, if desired. 

[0022] Further information data, such as personal 
identification data of the patient and codes of the opera- 
tions and/or functions selected by the operator can also 
be printed either in coded form or in alphanumeric cards ss 
on a sheet that will accompany the transportation con- 
tainer. 

[0023] The sample identification module 4 is control- 



led by a specific control software, the flowchart of which 
is shown in figure 8 and the functions of which will be 
described hereinafter. 

[0024] As shown in figure 4. an electronic key 50 com- 
prises: a connector 51 for connection to the key-gener- 
ating module 55 or to the control module 1; a memory 
chip 52 that stores the patient's coded data, and a slit 53 
for a strap (not shown) for securing the key, for example 
to the patient's wrist. The electronic key 50 stores a per- 
sonal code of the patient, which includes for example 
the nosological code and the date of birth of the patient 
or can contain previously stored numerals for identifying 
a specific set (key plus sample container) to be tested. 
[0025] The electronic key 50 has the function of acti- 
vating the unlocking of the box-like transportation seal 7 
by means of the control module 1, according to the 
method described hereinafter. 
[0026] The key-generating module 55 is provided with 
a connector 59 for connection to the key 50. with an 
electronic circuit 57 fed by batteries 58 or by external 
mains through a suitable feeder, and with a connector 
56 for connection to a personal computer or to the con- 
trol module 1. The key-generating module 55, when 
connected to an electronic key 50, stores therein the 
personal code of the patient, under the control of a soft- 
ware available in the PC or through the control module 
1. 

[0027] The box-like seal 6 (figure 5) is provided with a 
memory circuit and with connectors, i.e., a connector 61 
for connecting it to the control module 1 and an addi- 
tional service connector 62 for performing circuit tests 
with the aid of an external unit (not shown). 
[0028] A solenoid 63 is arranged inside the box-like 
seal 6 and is arranged to mechanically lock and unlock 
the box 6 to allow removal of the blood or blood product 
from the bag that has been sealed by said seal. 
[0029] The seal 6 can be released in emergency by 
means of screws 64. The screws 64 are arranged under 
a removable label (for example a metallic label) that 
makes it possible to detect any tampering of the box-like 
seal 6. The seal 6 is locked in closed position after a bag 
of blood or blood product, allocated to a preset patient, 
has been sealed inside it. Authorization to open the box- 
like seal 6 is given by means of the control module 1, 
after performing an allocation checking procedure has 
been performed as explained in more detail hereinafter. 
[0030] The seal 6 is locked in closed position by 
means of the locking module 7 (figure 6), which com- 
prises a memory circuit 71 that is powered by batteries 
72 that can be recharged by means of an external bat- 
tery charger (not shown) or by means of an external 
power supply (not shown). The connection to the bat- 
tery charger or to the power supply occurs by means of 
an appropriate connector 74. A LED 73 is provided on 
the locking module 7 to indicate whether the device is 
ON and to indicate the charging status of the battery 72. 
There are also two connectors 75 and 76, one of which 
is used for connection to an external processing unit. 
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not shown, such as a PC. 

[0031 ] The seal 6 constitutes a passive electric means 
provided with memory circuits and with circuits for con- 
trolling the solenoid 63, in which the data for allocation 
to a specific patient remain stored. 
[0032] The seal 6 can be controlled by the locking 
module 7 by means of a PC that is provided with a suit- 
able control software, the flowchart of which is shown in 
figure 9 and the functions of which will be described 
hereinafter. 

[0033] The operation of the above described sealing 
device is as follows: 

in a ward, a preset patient code, for example a 
patient's nosological code including date of birth, 
etc., is generated by means of the key-generating 
module 55 and is stored in an electronic key 50 that 
can be physically allocated to the patient, for exam- 
ple by applying it to his wrist by means of a strap of 
self-sealing type. 

[0034] If required, the device then prints patient's 
identification labels, unit requests with the identification 
data of the patient, any specific activity to be performed 
on the sample, etc.. 

[0035] A blood or blood product supply center, after' 
receiving a request for allocation of a bag of blood for a 
given patient, identifies a bag of blood or blood product 
that has the requested properties. 
[0036] Sealing of the bag is then performed with the 
electronic box-like seal 6, while said seal is connected 
to the locking module 7 through the respective connec- 
tors 61 and 75. The module 7 can be connected to an 
external processing unit (not shown) via its connector 
76. The locking module 7, by energizing the solenoid 
63, causes locking of the seal 6 and stores the unlock- 
ing code (that is to say, the bag code, the recipient code, 
and the control code) in the seal 6 which is now secured 
to or around the bag. The bag thus sealed is forwarded 
to the patient, for example delivered to the ward in which 
the patient is hospitalized. 

[0037] The control of this function is performed in the 
software of the external processing unit, e.g. a PC, and 
by the software inside the locking module 7, which will 
be described in greater detail hereinafter with reference 
to figure 9. 

[0038] The product code is first entered in the external 
processing unit (step 120) which reads out any stored 
data (step 120 A) and stores the read out data either into 
a file (stage 120B) and/or into the memory of a module 
1 (stage 120C). The processing unit effects then the 
necessary comparisons (step 120D) and after that the 
code of the recipient user (step 121) is entered. If pro- 
vided for, the operator code is entered (step 122) by 
means of the entry module 30 and/or 35. Subsequently 
the control code for mutually checking the product code 
and the recipient user (patient) code, generated in the 
module 7 and meant to be transferred into the seal 6 



(step 123), is generated. The previous code and the 
data stored in the memory of the seal 6 are read (step 
124) and stored in an appropriate external history file 
(for example on a PC) (step 125). If required, infbrma- 

s tion for a recipient laboratory or other identification data 
concerning the forwarding center or control data can be 
stored (step 126A). In step 126 the box-like seal 6 is 
locked by energizing the closure solenoid 63 (figure 5). 
The codes previously generated by the locking module 

w 7 are then recorded in the seal 6 (step 127) and re-read 
in step 128. If the comparison (step 129) is positive, the 
codes are stored in an external input history file (step 

1 30) and the process ends by restoring the routine (step 

131) . If the comparison is negative, the locking module 
is 7 unlocks the seal 6 and requests the entire procedure 

to be repeated (step 132). 

[0039] In the ward, the comparison between the code 
of the electronic key 50 and the codes contained in the 
electronic box-like transportation seal 6 is performed by 

20 means of the control module 1 . 

[0040] If the comparison is positive, the control mod- 
ule 1 authorizes the opening of the box-like seal 6, thus 
allowing to use the contents of the bag. 
[0041] Otherwise, unlocking does not occur and the 

25 seal cannot be opened. It is also possible to provide for 
an emergency opening of the bag. In any case, appro- 
priate messages are printed by means of the printing 
machine or printer 13, as described hereinafter with ref- 
erence to figure 7. 

30 [0042] More particularly, the control module 1 is 
switched on (step 100) and the circuit between the elec- 
tronic key 50 and the box-like seal 6 is closed by means 
of the respective connectors 16 and 17 (figure 1). 
[0043] If provided for, the operator code is entered 

35 (step 101) by means of the entry module 30 and/or 35; 
if said code is recognized, the user code is read in the 
electronic key 50 (step 1 02), then both the product code 
and the user code are read in the electronic seal 6, 
where the control code "X H is also read (step 103). A 

40 control code "Y" is generated in the subsequent step 
104 from the product code read in the seal 6 and from 
the code read in the electronic key of the patient; then a 
comparison between these control codes "X" and "Y" is 
performed in the subsequent step 105. Directly after this 

45 (step 106), the date and time are read in the suitably 
provided clock in the control module 1. The step 107 
shows the three possibilities that arise from the compar- 
ison in step 104. 

[0044] If the control codes "X" and "Y" are identical, 
so the allocation is correct, and therefore a message con- 
taining a report of normal opening, the date, the time, 
the product code, the user code in the seal 6, and the 
code of the electronic key of the patient is printed in step 
1 08, and a signal authorizing the opening of the box-like 
55 seal 6 is generated in the subsequent step 109, 
whereas during the subsequent step 110 said codes 
and the operator code are stored in the memory of the 
seal 6 or in the key 50, and the operation ends (step 
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111). 

[0045] If the control codes "X" and "Y" differ, this 
means that the allocation is incorrect, and therefore a 
message that contains the indication of an error in recip- 
ient user code and date, time, product code, sending 
user code in the seal 6. and the code of the electronic 
key of the patient is printed in step 1 12. The history data 
of the event are stored in the seal 6 or in the key 50 in 
step 1 13. and the operation ends (step 114). 
[0046] If the control codes "X" and w Y n are different but 
the code of the key has a preset emergency value, the 
emergency opening status is recognized. A message 
that contains the emergency opening indication, date, 
time, product code, user code in the seal, code of the 
electronic key, and code and identification data of the 
key owned by the person in charge, is printed in step 
1 15. The box-like seal 6 is then opened in step 1 16 and 
the said codes and the operator code are stored in said 
module in step 117. 

[0047] The operation ends in the subsequent step 
118, where the control module 1 is switched off. as in 
steps 111 and 114. 

[0048] At a center where empty and incorrectly allo- 
cated containers or bags are gathered, the container 
code is read and the device is unlocked (step 1 1 1 A) and 
if printing out of such code is required, this is done at 
111B. Then, all information data are memorized (step 
1 1 1 C) and/or stored in a file in an external PC at step 
1 1 1 D and checked. 

[0049] A way in which the control module 1 and the 
module 4 can be used for identifying samples of mate- 
rial to be subjected to chemical analysis is described 
hereinafter. For convenience, reference is made to the 
requirements of a hospital ward with respect to a labo- 
ratory or transfusion center. 

[0050] Blood samples, drawn in the ward from a spe- 
cific patient, are to be delivered to a transfusion center 
for analysis. Also in this case it is necessary to guaran- 
tee accurate identification of the blood sample that 
belongs to a given patient. As explained above, it is nec- 
essary to prepare beforehand a key 50 for identifying 
the patient and a test-tube labelled with the same code. 
[0051] Should the comparison between the code of 
the key 50 owned by the patient and the label on the 
container be positive, the empty container is fixed by 
means of the retaining means 47 and the comparison 
result is printed on the label of the container. Only after 
the container has been filled as a consequence of a 
blood drawing from the patient, the container is released 
for being forwarded to the transfusion center. 
[0052] This process is controlled by the software (see 
flowchart of figure 8) of the module 4 for identifying sam- 
ples of blood or of other material to be analyzed, whose 
functions are as follows. 

[0053] The identification module 4 is switched on 
(steps 139 and 140) by means of the connection of the 
electronic key 50 and of the container of the material to 
the control module 1. If provided for, the entry module 



30 and/or 35 is used to enter the code of the operator 
(step 141); only if said code is identified, the code of the 
electronic key 50 is read (step 142). 
[0054] A check operation for spotting errors and in 

5 particular for making sure that the test tube is the cor- 
rect one is effected at step 142 A. Should the test tube 
be a wrong one. a further check operation is performed 
at step 142B to determine whether identification code of 
the ward or laboratory is stored in the key 50. If yes, 

10 then such a code is digitized in the key 50 (step 142) 
and memorized; if not, or after storing of the code, infor- 
mation data available in the key are displayed and/or 
printed at step 142D. 

[0055] At stage 143 a number of assessments are 
15 automatically performed, i.e. without intervention of the 
operator, on the blood sample, e.g. the kind of test 
required, identification of the laboratory responsible for 
carrying out the test, details on the laboratory tests, 
modalities of blood taking, amount of blood required for 
20 the test, conditions for transporting the sample, type of 
answer, etc.. A check for errors is made at stage 143A, 
whereas at step 143, the internal optical reader is used 
to read the code of the container of the material (for 
example test-tube), and other desirable information 
25 data and in step 1 44 a comparison is made between the 
code of the electronic key 50 and the code of the pre- 
labeled test-tube. 

[0056] if the comparison fails, a message containing 
an error indication, the date, the time, the code of the 
30 user key. the code of the container, and the code of the 
operator (step 145) is printed on the label of the test- 
tube, and the process ends. 

[0057] If the comparison is positive, the container is 
blocked by the retaining means 47 (step 146) of the 

35 module 4 for identifying the samples of material. The 
reader 46 then checks for the presence of material in 
the container (step 147), and if there is liquid or other 
material in it the date and time are read in step 148. 
[0058] At step 149 printing is performed on the label 

40 of the container, e.g. indicating the date, the time, the 
code of the container, the code of the recipient user, and 
optionally the code of the operator and the required 
tests on sample. Checking is performed to spot errors at 
stage 149A, for punching document at stage 149B, for 

45 updating information data on the key 50 at stage 149C, 
whereas data storing in the key is effected at step 149D. 
[0059] At step 1 50, the container is then released, and 
the date, the time, the code of the electronic key. and the 
code of the container are printed on the companion 

so request form. After storing in an appropriate file in the 
control module 1 (step 151), the process ends. 
[0060] The above described method makes it possible 
to ensure correct identification of samples of material to 
be tested that originate from a well identified patient, 

55 with the possibility of reporting on any identification 
errors by printing appropriate messages, on the whole 
file history of both the container, its contents and the 
sample in the test tube. 
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[0061 ] The labels used to identify the various contain- 
ers can have bar codes that can be read with optical 
readers preset for bar codes. 

[0062] Figure 1 0 diagrammatically illustrates the main 
sequence of events according to the method of the 5 
present invention. 

[0063] First of all, the sending user or operator and a 
recipient user or laboratory are identified by a specific 
code, that is also stored in an electronic key (step 200). 
Then, identification data of a container and the material 10 
(e.g. blood) to be filled in the container and transferred 
and any treatment operation to be sequentially per- 
formed on the material are memorized on an electronic 
seal for the container at step 201 . 
[0064] At step 202 the container is filled or loaded, is 
sealed by means of an electronic seal and delivered to 
a recipient user or laboratory. A recognition procedure 
designed to check the information data concerning the 
operator responsible for the transportation, date, hour, 
place of delivery, etc., is carried out at step 203 by mak- 20 
ing use of the memorized electronic key, whereas 
unlocking of the container and access to the material 
contained in it is performed on step 201 . 
[0065] Should the container be delivered to a labora- 
tory or service center, an automatic safety reception 25 
procedure can be performed as illustrated in figure 1 1 . 
[0066] The code of the transportation operator is 
checked at step 205. The (bar) code on a test tube 47 
accompanying the container is read out at step 206 and 
information as to place, date, hour, receiving operator 30 
code, etc., are added to the label at step 207. The whole 
bulk of such added information data is stored in a mem- 
ory at step 208 and at step 209 the same information 
data are printed out on a sheet and placed on a file 
(step 210). 35 2. 

[0067] At step 21 1 , the container, if empty, is stored in 
a storeroom for subsequent utilization, or forwarded to a 
processing unit, e.g. testing unit, or filling unit. 
[0068] The device according to the invention is sus- 
ceptible of numerous modifications and variations within 40 
the scope of the claims. 

[0069) Where technical features mentioned in any 
claim are followed by reference signs, those reference 
signs have been included for the sole purpose of 
increasing the intelligibility of the claims and accordingly 45 
such reference signs do not have any limiting effect on 
the interpretation of each element identified by way of 
example by such reference signs. 

Claims so 

3. 

1 . A method for sealing containers and ensuring their 
correct allocation to a preset recipient user, com- 
prising the steps of: 

55 

- allocating an identification or recognition code 
to a sending user; 

- generating an electronic key that is unique for a 



recipient user, said electronic key containing 
personal data of the recipient user; 

- filling at least one container with at least one 
product to be transferred from the sending user 
to the recipient user; 

- sealing said at least one container by means of 
an electronic seal (6); 

- transferring the container to the recipient user; 

- performing an identification or recognition pro- 
cedure by means of the electronic key of the 
recipient user, and, in case of positive outcome 
of said procedure: 

- authorizing access to the product in the con- 
tainer; characterized in that it comprises also 
the steps of: 

recording information data on the identification 
and access procedures followed, said informa- 
tion data comprising data relating to unauthor- 
ized tempted accesses and failed tried 
accesses, and data relating to the various pas- 
sages from one user to another until the reach- 
ing of the recipient user; and 
said electronic seal (6) including an electronic 
locking device (7), said electronic locking 
device storing identification data of the con- 
tained product to be transferred to the recipient 
user, and control codes, said control codes 
constituting an unlocking code for the con- 
tainer; 

said electronic locking device (7) being con- 
nectable to said container and being connecta- 
ble to an external control device (1) by means 
of connectors (75, 76). 

A method as claimed in claim 1, characterized in 
that said filling step comprises identification by 
means of the control device of the electronic key 
and of the container, both of which are pre-coded; 

- comparison of the data of the container with 
those of the electronic key; 

printing of the data concerning the outcome of 
the comparison and consequent validation or 
invalidation of the container; 
securing of the container so as to fix it to the 
control device before filling; 

- filling of the container; and 

- printing of data related to the outcome of the 
operation. 

A method according to claim 2, characterized in 
that said filling operation comprises: 

reading the container content code by means 
of an external processing unit; 
entering the code of the recipient user; 
activating a sealing procedure by means of 
locking means that are provided with memory 
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unit allowing bidirectional transfer of codes and 
data creation of control codes, and 
sealing of the container by means of the elec- 
tronic sealing means. 

5 

4. A method according to claim 1, characterized in 
that said identification procedure comprises: 

- reading the unlocking code of the container by 
means of a control device; w 
comparing the read unlocking code of the con- 
tainer with the data of the electronic key of the 
recipient user; 

printing the data obtained from the outcome of 
the comparison and consequent authorization is 
to or prevention from opening the electronic 
seal; and 

storage of the operation outcome data. 

5. A method according* to claim 4, characterized in 20 
that it further comprises entering operator code in 

the control device. 

6. A method according to claim 1, characterized in 
that in case of identification failure following the 25 
identification procedure, a procedure for emer- 
gency unlocking of the electronic seal is followed. 

7. A device for sealing containers and ensuring their 
correct allocation to a preset recipient user, com- 30 
prising: 

at least one electronic box-like seal (6) for con- 
tainers of at least one product to be allocated to 
a recipient user, said electronic sea! including 35 
electronic locking means (7); 
means for generating at least one electronic 
programmable key containing an unlocking 
code; 

control means (1) adapted to perform a com- 40 
parison between said unlocking code stored in 
said electronic locking means and data con- 
tained in the at least one electronic key; 
code entry and access means (30) for access- 
ing and entering codes in the control means; 45 
characterized in that said at least one elec- 
tronic programmable key is programmable with 
information data including identification data of 
the recipient user; 

said control means (1) provided with report so 
means (1 3) for creating a final report of the per- 
formed comparison; 

said seal (6) comprises mechanical coupling 
means and electronic locking means (7) having 
an electronic memory unit (71) for said ss 
mechanical means, said memory unit being 
adapted to store said unlocking code for the 
opening of said container, said memory unit 



also storing data related to unauthorized 
tempted accesses and failed tried accesses to 
the container, to keep track of the history of the 
container; 

connector means being also provided to con- 
nect said electronic box-like seal to a container 
to be allocated to a recipient user. 

8. A device according to claim 7, characterized in that 
said code entry and access means comprise an 
alphanumeric keyboard. 

9. A device according to claim 7, characterized in that 
said code entry and access means comprise a 
badge reader. 

1 0. A device according to claim 7, characterized in that 
said electronic seal comprises an actuation sole- 
noid. 

11. A device according to claim 10, characterized in 
that said electronic seal comprises a box-like body 
that can be opened and closed for receiving said 
mechanical coupling means and electronic locking 
means. 

12. A device according to claim 11, further comprising 
a processing unit connectable to said electronic 
locking means. 

13. A device according to claim 7, characterized in that 
said control means comprise at least one printer. 

14. A device according to claim 7, characterized in that 
it comprises means for the identification of a con- 
tainer for the product to be allocated, said means 
including at least one reader for reading data on the 
container, means for comparing the data read on 
the container and the data stored in an electronic 
key, and a printer for printing the data of the com- 
parison. 

PatentansprOche 

1. Verfahren zum VerschlieBen von Behaltern und 
Gewahrleisten Ihrer richtigen Zuweisung zu einem 
vorgegebenen empfangenden Benutzer, umfas- 
send die Schritte: 

Zuweisen eines Identrf ikations- Oder Wiederer- 
kennungscodes fQr einen versendenden 
Benutzer; 

Erzeugen eines elektronischen SchlOssels, 
welcher einzigartig ist fur einen empfangenden 
Benutzer, wobei der elektronische SchlOssel 
die persOnlichen Daten das empfangenden 
Benutzers enthalt; 

Fallen mindestens eines Behalters mit minde- 
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stens einem Produkt, welches von dem versen- 
denden Benutzer Zu dem empfangenden 
Benutzer verschickt werden soil; 
VerschlieGen des mindestens einen Behaiters 
mittels eines elektronischen Verschlusses (6); 5 
Oberf Qhren des Behaiters zu dem empfangen- 
den Benutzer; 

DurchfQhren eines Identifikations- oder Wie- 
dererkennungsverfahrens mittels des elektroni- 
schen Schlussels des empfangenden 10 
Benutzers, und. im Fall eines positiven Aus- 
gangs dieses Verfahrens; 
Autorisierung des Zugangs zu dem Produkt in 
dem Behaiter; 

dadurch gekennzeichnet, daB es weiterhin is 
die Schritte umfaBt: 

Aufzeichnung von Informationsdaten fur die 
Identifikation und das folgende Zugangsverfah- 
ren, wobei die Informationsdaten Daten umfas- 
sen, welche sich auf nicht autorisierte 20 
Zugangsversuche und fehlgeschlagene 
Zugangsversuche beziehen und Daten, die 
sich auf die verschiedenen Wege von einem 
Benutzer zu einem anderen beziehen, bis zum 
Erreichen des empfangenden Benutzers; 2s 
und der elektronische VerschluB (6) eine elek- 
tronische VerschluBvorrichtung (7) beinhaltet, 
wobei besagte elektronische VerschluBvorrich- 
tung die Identifikationsdaten des enthaltenen 
Produkts, welches zu dem empfangenden 30 
Benutzers transportiert werden soil und Kbn- 
trollcodes speichert, wobei die Kontrollcodes 
einen Entriegelungscode fur den Behaiter dar- 
stellen; 

wobei die elektronische VerschluBvorrichtung 35 
(7) mit dem Behaiter verbindbar ist und an eine 
externe Kontrollvorrichtung (1) Ober Verbinder 
(75,76) verbindbar ist. 

2. Verfahren gemaB Anspruch 1, dadurch gekenn- 40 
zeichnet, daB der FGIIschritt eine Identifikation mit- 
tels dar Kontrollvorrichtung des elektronischen 
Schlussels und des Containers umfaBt welche 
beide vorcodiert sind; 

45 

Vergleichen der Daten des Containers mit 
denen des elektronischen Schlussels; 
Drucken dar Daten welche den Ausgang des 
Vergleichs und entsprechende Gurtigkeit oder 
Ungultigkeit des Containers betreffen, so 
Sichern des Containers, urn Ihn mit der Kon- 
trollvorrichtung zu verbinden, bevor der Contai- 
ner gefQIlt wird. 
Fullen des Containers und 
Drucken der Daten, die sich auf den Ausgang 55 
des Verfahrens beziehen. 

3. Verfahren gemaB Anspruch 2 dadurch gekenn- 



zeichnet, daB besagtes FQilverfahren umfaBt: 

Laser des Behatterinhaltscodes mittels einer 
externen Verarbeitungseinhat; 
Eingabe des Codes des empfangenden Benut- 
zers; 

Aktivieren eines VerschluBverfahrens mittels 
VerschluBvorrichtungen, welche mit einer 
Gedachtniseinheit versehen sind, welche 
einen bidirektionalen Transfer von Codes und 
die Erzeugung von Kontrollcodes in Datenform 
erlaubt, und 

VerschlieBen des Containers mittels der elek- 
tronischen VerschluBvorrichtungen. 

4. Verfahren gemaB Anspruch 1 dadurch gekenn- 
zeichnet, daB das Identif ikationsverfahren umfaBt: 

Lesen des Entriegelungscodes auf dem Con- 
tainer mittels einer Kontrollvorrichtung; 
Vergleichen des gelesenen Entriegelungsco- 
des des Containers mit den Daten des elektro- 
nischen Schlussels des empfangenden 
Benutzers; 

Drucken der Daten, die als Ergebnis des Ver- 
gleichs erhalten wurden und entsprechende 
Autorisierung oder Verhinderung des Offnen 
des elektronischen Verschlusses; und 
Speichern der erhaltenen Verfahrensdaten. 

5. Verfahren gemaB Anspruch 4, dadurch gekenn- 
zeichnet, daB es weiterhin des Eingeben des Ope- 
ratorcodes in die Kontrollvorrichtung umfaBt. 

6. Verfahren gemaB Anspruch 1, dadurch gekenn- 
zeichnet, daB im Faile eines Fehlschlagens der 
Identifikation nach dem IdentifikationsprozeB eine 
Notentriegelung des elektronischen Verschlusses 
folgt. 

7. Vorrichtung zum VerschlieBen von Behaitern und 
Sichern ihrer korrekten Zuordnung zu einem vorge- 
gebenen empfangenden Benutzer, umfassend; 
mindestens einen elektronischen kastenfOrmigen 
VerschluB (6) fur Behaiter fur mindestens ein Pro- 
dukt, welches einem empfangenden Benutzer 
zugeordnet werden soil, wobei der elektronische 
VerschluB elektronische VerschJuBmittel enthait (7); 

Mittel zum Erzeugen mindestens eines elektro- 
nisch programmierbaren SchlOssels, weicher 
einen Entriegelungscode enthait; 
Kontrollmittel (1), geeignet zum DurchfQhren 
eines Vergleichs zwischen dem Entriegelungs- 
code, weicher in dem elektronischen Ver- 
schluBmittel gespelchert ist, und den Daten, 
welche in dem mindestens einen elektroni- 
schen Schtussel enthalten sind; 
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Codeeingabe- und -zugangsmittel (30) zum 
Zufuhren und Eingeben der Codes in die Kon- 
trollvorrichtungen; 

dadurch gekennzeichnet, daB mindestens 
ein elektronischer programmierbarer Schlussel 
mit Informationsdaten programmiert werden 
kann, welche die Identif ikationsdaten des emp- 
fangenden Benutzers umfassen; 
wobei die Kontroilmittel (1) mit Berichtsmittein 
versehen sind (13) zum Erzeugen eines 
AbschluBberichts uber die durchgefuhrten Ver- 
gleiche; 

besagter VerschluB (6) mechanische Kopp- 
lungsmittel und elektronische VerschluBmittel 
(7), weiche eine elektronische Gedachtnisein- 
heit (71) fur die mechanischen Mittel besitzen, 
umfaBt, wobei die Gedachtniseinheit geeignet 
ist die Entriegelungscodes fur das Offnen des 
Behalters zu speichern, wobei die Gedachtnis- 
einheit ebenfalts die Daten, die sich auf nicht 
autorisierte Zugangsversuche und fehlgeschla- 
gene Zugangsversuche zu dem Behalter 
beziehen, speichert, um die Geschichte des 
Behalters zu verfolgen; 

zusatzlich Verbindungsmittel vorgesehen sind, 
um den besagten elektronischen kastenfOrmi- 
gen VerschluG mit einem Behalter zu verbin- 
den, welcher einem empfangenden Benutzer 
zugeordnet ist. 

8. Vorrichtung nach Anspruch 7, dadurch gekenn- 
zeichnet, daB die Codeeingabe- und -zugangsmit- 
tel eine alphanumerische Tastatur umfassen. 

9. Vorrichtung gemaB Anspruch 7, dadurch gekenn- 
zeichnet, daB die Codeeingabe- und -zugangsmit- 
tel einen Plakettenleser umfassen. 

10. Vorrichtung gemaB Anspruch 7, dadurch gekenn- 
zeichnet, daB der elektronische VerschluB einen 
auslCsenden Solenoid enthalt. 

11. Vorrichtung gemaB Anspruch 10, dadurch 
gekennzeichnet, daB der elektronische VerschluB 
einen kastenfOrmigen Kflrper umfaBt, welcher 
geOffnet und geschlossen werden kann, um die 
mechanischen Kbpplungsmittel und elektronischen 
VerschluBmittel aufzunehmen. 

12. Vorrichtung gemaB Anspruch 11, welche weiterhin 
eine Verarbeltungseinheit umfaBt, welche mit den 
elektronischen VerschluBmittel n verbindbar ist, 

13. Vorrichtung gemaB Anspruch 7, dadurch gekenn- 
zeichnet, daB die Kontroilmittel mindestens einen 
Drucker umfassen. 

14. Vorrichtung gemaB Anspruch 7, dadurch gekenn- 



zeichnet, daB sie Mittel fur die Identifikation eines 
Behalters fur des Produkt, welches zugeordnet 
werden soli, umfassen, wobei diese Mittel minde- 
stens einen Leser zum lesen von Daten auf dem 
5 Container, Mittel zum Vergleichen der gelesenen 
Daten auf dem Container mit den Daten, die in 
einem elektronischen Schlussel gespeichert sind 
und einen Drucker zum Drucken der Vergleichsda- 
ten enthalten. 

10 

Revendi cations 

1. Proc6d6 pour sceller des conteneurs et assurer 
leur attribution correcte a un utilisateur-destinataire 
is predetermine, comprenant les etapes consistant a : 

- attribuer un code d'identification ou de recon- 
naissance a un utilisateur-envoyeur ; 
engendrer une cle electronique qui est unique 

20 pour un utilisateur-destinataire, la cle 6lectroni- 

que comprenant des donnSes personnelles de 
{'utilisateur-destinataire ; 
remplir au moins un conteneur avec au moins 
un produit a transferer de I'utilisateur-envoyeur 

25 a I'utilisateurdestinataire ; 

sceller ledit au moins un conteneur au moyen 
d'un sceau electronique (6) ; 

- transferer le conteneur a I'utilisateurdestina- 
taire ; 

30 - accomplir une procedure d'identification ou de 
reconnaissance au moyen de la cle electroni- 
que de I'utilisateur-destinataire, et en cas de 
resultat positif de ladite procedure : 
autoriser introduction du produit dans ie con- 

35 teneur ; 

caracterise en ce qu'il comprend aussi les eta- 
pes consistant a : 

- enregistrer des donnees d'information sur les 
procedures d'identification et d'introduction sui- 

40 vies, lesdites donnees d'information compre- 

nant des donnees relatives a des tentatives 
d'introduction non autorisees et des tentatives 
d'introduction qui ont echoue et des donnees 
relatives aux divers passages d'un utilisateur a 

45 I'autre jusqu'a ce que I'utilisateur-destinataire 

sort atteint ; et 

le sceau electronique (6) incluant un dispositif 
de verrouiilage electronique (7), ledit dispositif 
de verrouiilage stockant des donnees d'identrf i- 
so cation du produit contenu qui doit Stre transf ere 

a I'utilisateur-destinataire, et des codes de 
commande, lesdits codes de commande cons- 
tituant un code de deverrouillage pour le conte- 
neur ; 

55 - ledit dispositif de verrouiilage Electronique (7) 
etant connectable audit conteneur et etant con- 
nectable a un dispositif de commande externe 
(1) au moyen de connecteurs (75, 76). 
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ProcEdE selon la revendication 1 caractErisE en ce 
que TEtape de remplissage comprend I'identifica- 
tion au moyen du dispositif de commande de la cle 
Electronique et du conteneur, ces des derniers 
Etant pre-codes ; 5 

la comparaison des donnEes du conteneur 
avec celles de la clE Electronique ; 
Timpression des donnees concernant le rEsul- 
tat de la comparaison et la validation ou I'invali- w 
dation qui s'ensuitdu conteneur ; 
la fixation du conteneur de maniere a Tattacher 
au dispositif de commande avant le remplis- 
sage ; 

le remplissage du conteneur ; et is 
Timpression de donnees relatives au resultat 
de {'operation. 

ProcEdE selon la revendication 2, caractErisE en ce 
que Toperation de remplissage comprend : 20 

la lecture du code de contenu du conteneur au 
moyen d'une unite de traitement exterieur ; 
Tentree du code de Tutilisateur-destinataire; 
I'activation de la procedure de scellage au 25 
moyen de moyens de verrouillage qui sont 
dotes d'une unite de mEmoire permettant un 
transfert bidirectionnel de codes et la creation 
de donnees de codes de commande, et 
le scellage du conteneur au moyen des 30 
moyens de scellage electronique. 

ProcEdE selon la revendication 1 , caracterise en ce 
que la procedure ^identification comprend : 

35 

- la lecture du code de dEverrouillage du conte- 
neur au moyen d'un dispositif de commande ; 
la comparaison du code lu de dEverrouillage du 
conteneur avec les donnees de la cle Electroni- 
que de Putilisateur-destinataire ; 40 
Timpression des donnees obtenues a partrr des 
rEsultats de comparaison et de Cauterisation ou 

de Tinterdiction qui s'ensuit d'ouvrir le sceau 
electronique ; et 

- le stockage des donnees de rEsultat de TopEra- 45 
tion. 

ProcEdE selon la revendication 4, caracterise en ce 
qu'il comprend en outre TentrEe d'un code opEra- 
teur dans le dispositif de commande. so 

ProcEdE selon la revendication 1, caracterise en ce 
qu'en cas d'echec d'identification a la suite de la 
procedure d'identification, une procedure de dever- 
rouiilage de secours du sceau Electronique est sui- 55 
vie. 

Dispositif pour sceller des conteneurs et assurer 



leur attribution correcte a un utilisateu^destinataire 
prEdEterminE comprenant : 

au moins un sceau Electronique (6) en forme 
de botte pour conteneur d'au moins un produit 
a attribuer a un utiiisateur-destinataire, ledit 
sceau Electronique comprenant des moyens 
de verrouillage Electronique (7) ; 

- des moyens pour engendrer au moins une clE 
Electronique programmable contenant un code 
de dEverrouillage ; 

- des moyens de commande (1) agencEs pour 
effectuer une comparaison entre un code de 
dEverrouillage stockE dans lesdits moyens de 
verrouillage Electronique et des donnEes con- 
tenues dans la au moins une clE Electronique ; 

- des moyens (30) d'entrEe et d'introduction de 
code pour introduire et entrer des codes dans 
les moyens de commande ; caractErisE en ce 
que ladite au moins une clE Electronique pro- 
grammable est programmable avec des don- 
nEes d'information comprenant des donnEes 
d'identification de Tutilisateur-destinataire ; 
Lesdits moyens de commande (1) sont munis 
de moyens de rapport (13) pour crEer un rap- 
port final de la comparaison effectuEe ; 

- ledit sceau (6) comprend des moyens de cou- 
plage mEcanique et des moyens de ver- 
rouillage Electronique (7) ayant une unitE de 
mEmoire Electronique (71) pour lesdits moyens 
mEcaniques, ladite unitE de mEmoire Etant 
adaptEe pour stocker ledit code de dEver- 
rouillage pour Touverture dudit conteneur, 
ladite unitE de mEmoire stockant aussi des 
donnEes relatives aux tentatives d'introduction 
non autorisEes et aux tentatives d'introduction 
qui ont EchouE au conteneur, afin de garder 
une trace de Thistorique du conteneur ; 

les moyens de connecteur Etant aussi prEvus 
pour connecter ledit sceau Electronique en 
forme de boTte a un conteneur a attribuer a un 
utiiisateur-destinataire. 

8. Dispositif selon la revendication 7, caractErisE en 
ce que lesdits moyens d'entrEe et d'introduction de 
codes comprennent un clavier alphanumErique. 

9. Dispositif selon la revendication 7, caractErisE en 
ce que lesdits moyens d'entrEe et d'introduction de 
codes comprennent un lecteur de badge. 

10. Dispositif selon la revendication 7 caractErisE en ce 
que ledit sceau Electronique comprend un soJE- 
noTde d'actionnement. 

11. Dispositif selon la revendication 10, caractErisE en 
ce que ledit sceau Electronique comprend un corps 
en forme de boTte qui peut etre ouvert ou fermE 
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pour recevoir lesdits moyens de couplage mecani- 
que et les moyens de verrouillage electronique. 

12. Dispositif selon (a revindication 11, caracteris6 en 

ce que ledit sceau electronique comprend en outre s 
une unite de traitement connectabie auxdits 
moyens de verrouillage electronique. 

13. Dispositif selon la revendication 7, caracterisS en 

ce que lesdits moyens de commande comprennent io 
au moins une imprimante. 

14. Dispositif selon la revendication 7, caracterise en 
ce qu'il comprend des moyens pour I'identification 
d'un conteneur pour le produit a attribuer, lesdits is 
moyens comprenant au moins un lecteur pour lire 
des donnees sur le conteneur, des moyens pour 
comparer des donnees lues sur le conteneur et les 
donnees stockees dans une cle electronique, et 
une imprimante pour imprimer les donnees de la 20 
comparaison. 
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